CVE-2026-62871

Analyzed Analyzed - Analysis Complete

Out-of-bounds Write in .NET Framework

Publication date: 2026-08-11

Last updated on: 2026-08-13

Assigner: Microsoft Corporation

Description

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-11

Last Modified

2026-08-13

Generated

2026-08-31

AI Q&A

2026-08-12

EPSS Evaluated

2026-08-30

NVD

CVE-2026-62871

EUVD

EUVD-2026-56679

Affected Vendors & Products

Vendor	Product	Version / Range
microsoft	.net	From 8.0.0 (inc) to 8.0.30 (exc)
microsoft	.net	From 9.0.0 (inc) to 9.0.19 (exc)
microsoft	.net	From 10.0.0 (inc) to 10.0.11 (exc)
microsoft	visual_studio_2022	From 17.14.0 (inc) to 17.14.38 (exc)
microsoft	visual_studio_2026	From 18.8.0 (inc) to 18.8.3 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-122	A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This is an out-of-bounds write vulnerability in .NET that allows an unauthorized attacker to execute code locally. It occurs when software writes data outside the bounds of allocated memory, potentially corrupting other data or executing malicious code.

Detection Guidance

Detection requires monitoring for unusual activity or crashes in .NET applications. Check for out-of-bounds write patterns in logs or memory dumps. Use tools like Application Verifier or Windows Defender Exploit Guard to detect suspicious behavior in .NET processes.

Impact Analysis

An attacker could exploit this to run arbitrary code on your system, potentially gaining control over it. This could lead to data theft, installation of malware, or disruption of services if the attacker has local access.

Compliance Impact

This vulnerability allows unauthorized code execution, which could lead to unauthorized data access or modification. This may impact compliance with GDPR (data protection) and HIPAA (health data security) by enabling breaches of confidentiality and integrity.

Mitigation Strategies

Apply the latest security updates from Microsoft for .NET as soon as possible to patch the out-of-bounds write vulnerability.

Hi! I’m here to help you understand CVE-2026-62871. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70